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Abstract 

A K-user secure Gaussian Multiple-Access-Channel (MAC) with an external eavesdropper is considered in this paper. An 
achievable rate region is established for the secure discrete memoryless MAC. The secrecy sum capacity of the degraded Gaussian 
MIMO MAC is proven using Gaussian codebooks. For the non-degraded Gaussian MIMO MAC, an algorithm inspired by 
, interference alignment technique is proposed to achieve the largest possible total Secure-Degrees-of-Freedom (S-DoF). When all 

' the terminals are equipped with a single antenna, Gaussian codebooks have shown to be inefficient in providing a positive S-DoF. 

^ ' Instead, a novel secure coding scheme is proposed to achieve a positive S-DoF in the single antenna MAC. This scheme converts 

I the single-antenna system into a multiple-dimension system with fractional dimensions. The achievability scheme is based on the 

alignment of signals into a small sub-space at the eavesdropper, and the simultaneous separation of the signals at the intended 
receiver. Tools from the field of Diophantine Approximation in number theory are used to analyze the probability of error in the 
^■f^ ' coding scheme. It is proven that the total S-DoF of ^^j^ can be achieved for almost all channel gains. For the other channel gains, 

a multi-layer coding scheme is proposed to achieve a positive S-DoF. As a function of channel gains, therefore, the achievable 
S-DoF is discontinued. 

c/j I I. Introduction 

^ ' The notion of information theoretic secrecy in communication systems was first introduced by Shannon in [IJ. The information 
theoretic secrecy requires that the received signal of the eavesdropper not provide any information about the transmitted 
messages. Following the pioneering works of Wyner [2| and Csiszar et. al. [3 | which studied the wiretap channel, many multi- 
user channel models have been considered from a perfect secrecy point of view. The secrecy capacity rate has been established 



X 



> 

' for some basic models, including the Gaussian wiretap channel 14), the MIMO wiretap channel Q-l^), and the fading wiretap 
channel ifTOl . fTT\. Additionally, the secrecy capacity rate regions have been characterized successfully for some multi-user 
channels, including the MIMO Gaussian broadcast channel with confidential messages [il2i - tl6i . 

The secure Gaussian MAC with/without an external eavesdropper is introduced in lfT7l - ll20l . The secure Gaussian MAC 
with an external eavesdropper consists of an ordinary Gaussian MAC and an external eavesdropper. The capacity region of 
; this channel is still an open problem in the information theory field. For this channel, an achievable rate scheme based on 
Gaussian codebooks is proposed in ll20l . and the sum secrecy capacity of the degraded Gaussian channel is found in ifTSl . For 
some special cases, upper bounds, lower bounds, and some asymptotic results on the secrecy capacity exist; see for example 
II21J -I.24I. For the achievability part. Shannons random coding argument has proven to be effective in these works. 

The secure MAC generalizes the wiretap channel. In the wiretap channel, the direct coding scheme uses the framework of 
random coding, which is widely used in the analysis of multi-terminal source and channel coding problems. One approach 
to find achievable sum rates for the secure MAC is to extend the random coding solution to the secure multi-user. As we 
will show in this paper, this extension leads to a single-letter characterization for the secure rate region of the MAC. Our 
achievability, as usual, is based on the i.i.d random binning scheme. 

On the other hand, it is shown that the random coding argument may be insufficient to prove capacity theorems for certain 
channels; instead, structure codes can be used to construct efficient channel codes for Gaussian channels. In reference ll25l . 
nested lattice codes are used to provide secrecy in two-user Gaussian channels. In [^5*1 it is shown that structure codes can 
achieve a positive S-DoF in a two-user MAC. In particular, the achievability scheme of [251 provides an S-DoF of i for a 
small category of channel gains and for the other categories, it provides a S-DoF of strictly less than i. 

In reference |26|, the concept of interference alignment is introduced and has illustrated its capability in achieving the full 
DoF of a class of two-user X channels. In reference [27], and [28 J . a novel coding scheme applicable in networks with single 
antenna nodes is proposed. This scheme converts a single antenna system into an equivalent Multiple Input Multiple Output 
(MIMO) system with fractional dimensions. 

In this work we establish the secrecy sum capacity of the degraded Gaussian MIMO MAC using random bininng of Gaussian 
codebooks. For the non-degraded channel, we present an algorithm inspiring the notion of signal alignment to achieve the 
largest S-DoF by using Gaussian codebooks. We then use the notion of real alignment of ITT\ to prove that for almost all 
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Fig. 1. Secure _ff-user Gaussian MIMO Multiple- Access-Channel 



channel gains in the secure K user single-antenna Gaussian MAC, we can achieve the S-DoF of Here, our scheme 

uses structure codes instead of Gaussian codebooks. In the case of the channel gains for which the S-DoF of -^^^ cannot be 
achieved, we propose a multi-layer coding scheme to achieve a positive S-DoF. The scheme of this work differs from that 
of II25I . in the sense that our scheme achieves the S-DoF of ^ for almost all channel gains, while reference 125 j] provides a 
scheme that achieves the S-DoF of i (when K = 2) for specific channel gains, i.e., algebraic irrational gains. Therefore, we 
prove that the carve of S-DoF versus channel gains is almost certainly constant with many discontinuations. 

The rest of the paper is organized as follows: Section II provides some background and preliminaries. In section III, we 
consider the secure Gaussian MIMO MAC and establish the secrecy sum rate for the degraded channel. In this section, we 
propose an algorithm to achieve the largest possible value of S-DoF for the non-degraded channel model. We present our 
results for the achievable S-DoF of the single-antenna MAC in section IV. Finally, section V concludes the paper. 

II. Preliminaries 

Consider a secure iiT-user Gaussian MIMO Multiple-Access-Channel (MAC) as depicted in Fig. [T] In this confidential 
setting, each user k (k E JC ~ {1,2,..., if}) wishes to send a message Wk to the intended receiver in n uses of the channel 
simultaneously, and prevent the eavesdropper from having any information about the messages. At a specific time, the signals 
received by the intended receiver and the eavesdropper is given by 

K 

y =X!HkXk + ni (1) 

fe=i 

K 

Z= ^Hk.eXk + n2 

fe=l 

where 

• Xk for k = 1,2, ...,K is a real input vector of size Mk x 1 under an input average power constraint. We require that 
2^7'(Qk) < P, where Qk = i?[xkxj^]. Here, the superscript f denotes the Hermitian transpose of a vector and Tr{.) 
denotes the Trace operator on the matrices. 

• y and z are real output vectors which are received by the destination and the eavesdropper, respectively. These are vectors 
of size N X 1 and A^e x 1, respectively. 

• Hk and Hk,e for fc = 1, 2, ...,i4r are fixed, real gain matrices which model the channel gains between the transmitters and 
the intended receiver, and the eavesdropper, respectively. These are matrices of size x Mf. and Ne x Mk, respectively. 
The channel state information is assumed to be known perfectly at all the transmitters and at all receivers. 

• rii and n2 are real Gaussian random vectors with zero means and covariance matrices Ni = i?[nini^] = In and 
N2 = i?[n2n2^] = iNe' respectively. Here, Im represents the identity matrix of size M x M. 

Let x^, y" and z" denote the random channel inputs and random channel outputs matrices over a block of n samples. 
Furthermore, let n", and rig denote the additive noises of the channels. Therefore, we have 

K 

y"-^Hkx;j + n? (2) 

fe=i 

K 

z"=^Hk,ex£ + n^. 

fc=i 
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Note that bold vectors are random while the matrices Hk and Hk,e are deterministic matrices for all fc e /C. The columns 
of n" and 112 are independent Gaussian random vectors with covariance matrices In and In^, respectively. In addition n" 
and n2 are independent of xJJ's and Wk'&- A ((2"^^ , 2"^^, 2"^*), n) secret code for the above channel consists of the 
following components: 

7) K secret message sets Wk = {1,2, ...,2"^''}. 

2) K stochastic encoding functions /fc(.) which map the secret messages to the transmitted symbols, i.e., fk-Wk^ xJJ for 
each Wk G Wfc. At encoder k, each codeword is designed according to the transmitter's average power constraint P. 

3) A decoding function 4>{.) which maps the received symbols to estimate the messages: 0(y") — (Wi, Wk)- 

The reliability of the transmission is measured by the average probability of error, which is defined as the probability that 
the decoded messages are not equal to the transmitted messages; that is, 

Pi"^ = ^7/ „ E P(0(y")^K,...,«iK)IK,...,u'/c)issent). (3) 

^^k=l^ (■!Di,...,t«K)gWix....xWK 

The secrecy level is measured by the normalized equivocation defined as follows: The normalized equivocation for each subset 
of messages Ws for 5 C /C is 

A, t ifflgJfl. ,4, 

H{Ws) 

The rate-equivocation tuple {Ri, Rk , d) is said to be achievable for the Gaussian MIMO Multiple- Access-Channel with 
confidential messages, if for any e > 0, there exists a sequence of ((2"^\ ...,2"^^),n) secret codes, such that for sufficiently 
large n, 

Pi"^ < e, (5) 

and 

A5 > d - e, yS QIC. (6) 

The perfect secrecy rate tuple {Ri, Rk) is said to be achievable when d — 1. When all the transmitted messages are 
perfectly secure, we have 

Ak > 1 - e, (7) 

or equivalently 

H{Wk\2") > HIWk) - eH{WK). (8) 
The normalized equivocation of each subset of messages can then be written as follows: 

iJ(VKs|z")'^^ ff(W5,W5c|z") -i/(VF5c|VKs,z") (9) 

= i/(VKyc|z") - i/(VF5e|VF5,z") 

(b) 

> H{W,c) - eH{W,c) - H{Ws^\Ws,z'^) 
HiWs)+H{Wso\Ws) - tH{WK) - H{Wso\Ws,2.'') 

(d) 

> H{Ws)-eH{W,c), 

where (a) and (c) follow from the chain rule, (6) follows from (|7|l and (d) follows from the fact that conditioning always 
decreases the amount of entropy. Therefore, the normalized equivocation of each subset of messages is 

A5>l-e', (10) 

where e — e. Thus, when all of the K messages are perfectly secure then it is guaranteed that any subset of the 

messages becomes perfectly secure. 

The total Secure Degrees-of Freedom (S-DoF) of rj is said to be achievable, if the rate-equivocation tuple (i?i, RK,d = 1) 
is achievable, and ^ 

lim ^fe^ii^ (11) 
' P^oo ilogP 

III. Secure DoF of the Multiple- Antenna Multiple-Access-Channel 

In this section, we first present an achievability rate region for the secure discrete memoryless MAC. We then characterize 
the sum capacity of the degraded secure discrete memoryless and degraded Gaussian MIMO MAC. We present an achievable 
S-DoF of the non-degraded Gaussian MIMO MAC under the perfect secrecy constraint using Gaussian codebooks. In order 
to satisfy the perfect secrecy constraint, we use the random binning coding scheme to generate the codebooks. To maximize 
the achievable degrees of freedom, we adopt the signal alignment scheme to separate the signals at the intended receiver and 
simultaneously align the signals into a small subspace at the eavesdropper. 
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A. Discrete Memoryless MAC 

In this subsection, we study the secure discrete MAC of P{y, z\xi, xk) with K users and an external eavesdropper The 
following theorems illustrate our results: 

Theorem 1: For the perfectly secure discrete memoryless MAC of P{y,z\xi, ...,xk), the region of 



I (i?i, Rk)\ < IiUs;Y\Us^), J2 Rk < [I{Ui 

{ ies keK 



)c;Y)-I{U^;Z)] 



(12) 



for any distribution of P{ui)P{u2).-..P{uk)P{xi \ui)P{x2\u2)...P{xK\uK)P{yi z\xi, xk), is achievable. 

Proof: The proof is available in Appendix A. ■ 
In this Theorem [a;]+ denotes the positivity operator, i.e., [x]'^ = max(a:,0). Reference f20| derived an achievable rate region 
with Gaussian codebooks and power control for the Gaussian secure MAC when all the transmitters and receivers are equipped 
with a single antenna. Theorem [T] however, gives an achievability secrecy rate region for the general discrete memoryless 
MAC. Our achievability rate region is also larger than the region of ll20l in the special Gaussian channel case. Therefore, we 
have the following achievable sum rate for the secure discrete memoryless MAC: 

Corollary 1: For the secure discrete memoryless MAC of P{y,z\xi, ...,xk), the following sum rate is achievable: 

Rsnm^m(ix[IiUK;Y)-IiUK;Z)]+ , (13) 

where the maximization is over aU distributions P{ui)...P{uK)P{xi\ui)...P{xK\uK)P{y, z\xi, xk) that satisfy the markov 
chain Wk. Uk. ^ Xk, ^ YZ. 



B. Gaussian MIMO MAC 

Consider the secure Gaussian MIMO MAC of ([T]i which can be re-written as follows: 



= Hx 



ni 
n2 



N 



^2' 



it 



(14) 



Without loss of generality, assume 



N„ for all fc e /C. Note that when the channel 



where, H = [Hi, H2, Hk], Hg = [Hi,e, H2,e, Hk.g], and x = 
that all nodes are equipped with the same number of antennas, i.e., Mk 
gain matrices Hk and Hk,e are identity matrices we can determine that one channel output is degraded w.rt. another by 
examining whether their noise covariances can be ordered correctly. In however, all noise covariances are identity matrices 
and the receive vectors differ only in their channel gain matrices. Therefore, similar to ll30l . we use the following definition 
to determine a degradedness order: 

Definition 1: A receive vector z = HeX + n2 is said to be degraded w.rt. y = Hx + rii if there exists a matrix D such 
that DH = He and such that DD^ < I. Alternatively, we say that He is degraded w.rt. H. 

According to this definition, it is easy to see that y can be approximated by multiplying Dy. The approximated channel has 
a different additive noise which is now given by Drii ^ A/^(0,DD^) compared to the original channel. As this approximated 
channel has less noise (DD^ < I), however, it is clear that any message that can be decoded by the eavesdropper, can also be 
decoded by the intended receiver In the other words Wk. — )■ x y z forms a Markov chain. 

Theorem 2: The secrecy sum capacity of the degraded Gaussian MIMO MAC is given by 



Csum = max \ log 



HkQkH 



keK 



/+^Hk,eQkH 



keK 



Proof: We need to show that the secrecy sum capacity is as follows: 



Csum = ^ log 



I+Y. HkQkH 



keK 



Hk,eQkH[, 



keK 



(15) 



(16) 



if the inputs are subject to the following covariance matrices constraints: 

Kx^ < Qk, Vfc e /C, (17) 

where Kx^ denotes the covariance matrix of Xk. Theorem [3] then follows by maximization over all Qi, Q2 , and Qk that 
satisfy the power constraint, i.e., Tr(Qk) < P, for all k £ K,. 

The achievability of this theorem follows from Theorem [T] by choosing Uk = Xk ^ N(0, Qk). The converse proof is 
presented in Appendix B. ■ 

According to ( |69] l, it is easy to show that: 

Corollary 2: The total S-DoF for the degraded Gaussian MIMO MAC is 77 0. 
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Fig. 2. Separation/Alignment of Signals at the Intended Receiver/Eavesdropper 



Now consider the general Gaussian MIMO MAC where it's not necessarily degraded. According to Theorem [T] by choosing 
Uk = Xk ^ A/'(0, Qk), it is easy to see that the following secrecy sum rate is achievable. 
Corollary 3: For the Gaussian MIMO MAC, an achievable secrecy sum rate is given by 



Rs 



keK 



max — log 

Q:QtO,Tr(Q)<P 2 



I + J2 HkQkH 



keK 



1 



log 



I 



keK 



HkeQkH 



(18) 



Note that in the above achievable scheme, we chose = Qk which generally is not optimal. In general, solving the 

maximization problem of ( fTSl l is difficult. Reference [20], however, has solved this problem for a single antenna case and 
derived the optimal power control policy. As shown in [20] even for a single antenna case some users need to be silent and 
therefore those users can cooperatively help to jam the eavesdropper. 

We study the S-DoF defined in ( fTTI ) to analyze the behavior of the sum rate in high SNR. We design the following strategy 
scheme at the transmitters. 

To achieve the largest value for S-DoF we need to separate the received signals at the legitimate receiver, such that each 
received signal has a different dimension in the signal space of the legitimate receiver. At the same time all the received signals 
at the eavesdropper need to be aligned in a minimal subspace of the signal space of the eavesdropper (see Fig|2l). 

Let Xk = FkVk where, Fk is a pre-coding matrix such that FkF]^ = Qk and Vk is a vector with i.i.d Gaussian 
components with zero mean and unit variance, i.e, Vk = [i;^, w^]^, such that vj^ ^ J\f (0,1) for j — 1,2,...,N. Let 
■0j = [0, 0, 0, 1, 0, 0]^ be a X 1 vector that all of its elements are zero except the ith element which is 1. Let 
Fk — [fk 1 fk ' fk']' where f^'s for i — 1,2, N sae N x 1 vectors that represent the columns of Fk. We use the following 
algorithm to choose f^'s: 

• Assume that for users k = 1,2,..., J, the matrix Hk,e has non-empty null space and the null space of Hk,e for users 
k = J + 1, J + 2, K is empty. The users fc = 1, 2, min{ J, N} choose such that Hk,efk = 0. Almost surly, we 
can assume that these vectors occupy separate dimensions at the legitimate receiver 

• If J > A^, then all the N dimensions at the legitimate receiver are full and rj = N . 

• If J < N, users k = J+1, J +2, mm{K, N} then create a vector such that Hk,efk = '^i- Theses vectors, therefore, 
are aligned at the eavesdropper in one dimension and almost surely occupy separate dimensions in the remaining subspace 
of the legitimate receiver 

• If < K, at this step all the dimensions at the legitimate receiver are full and one dimension at the eavesdropper has a 
non-zero signal. Thus, -q = N — 1. 

• If N > K, users k — 1,2, J then also creates a vector such that Hk^gfk — "^Pi- These vectors are also aligned at 
the dimension xp^ and almost surely i] — N — 1 

• We repeat the above steps such that all the dimensions at the legitimate receiver become full. 

The above algorithm can be followed when the users and the receivers are equipped with different numbers of antennae. The 
following theorem characterizes the maximum amount of the total S-DoF that can be achieved by Gaussian codebooks. 

Theorem 3: For the Gaussian MIMO MAC, the following r/ for S-DoF can almost surely be achieved for almost all channel 
gains by using Gaussian codebooks and under perfect secrecy constraint: 

^ n + 



V = 



Mk,N}-r 



(19) 



where < r < minj^^gj^ AI^, N^} depends on the channel gain matrix He. 
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Note that in Theorem [3] it is emphasized that total [min {J2keK ^'^k, ~ ^ S-DoF is achievable for almost all channel 
gains. It means the set of all possible gains that the total amount of [min {J2keic ^'^^^ ^} ~ ^] ^ S-DoF may not be achieved 
has the Lebesgue measure zero. In other words, if all the channel gains are drawn independently from a random distribution, 
then almost all of them satisfy properties required to achieve the total S-DoF, almost surely. The term "almost surely" means 
with a probability arbitrary close to 1. 

Remark 1: In the achievability scheme of Theorem [3] all the transmitted signals are aligned into a r dimensional subspace 
at the eavesdropper, and hence, impairs the ability of the eavesdropper to distinguish any of the secure messages efficiently. 
Now assume that the transmitters can cooperate with each other: we have a MIMO wiretap channel where the transmitter has 
TlikeK antennas and the legitimate and eavesdropper have N and iVe antennas, respectively. The secrecy capacity of this 
channel is indeed an upper-bound for the secrecy sum capacity of the Gaussian MIMO MAC. As the capacity of a non-secret 
MIMO channel is an upper-bound for the secrecy capacity of the MIMO wiretap channel, we have the following upper-bound 
for S-DoF for the secure Gaussian MIMO MAC. 

Lemma 1: For the Gaussian MIMO MAC, the maximum total achievable S-DoF under perfect secrecy constraint is given 

by 



Vn 



mini ^Mfc,ivi. (20) 
[kefc J 



The maximum penalty for the achievable S-DoF in Theorem[3]is therefore r, where, < r < minj^j.^^ Alk, N^}. We note 
that an achievable S-DoF in the MIMO wiretap channel using zero-forcing beamforming is given as follows. 
Lemma 2: In the MIMO wiretap channel, the following S-DoF is achievable, almost surely. 



J2 ^ '^k - r 
.keic 



,A^>, (21) 



where 1 < r < iVe depends on the channel gain matrix He. 

Remark 2: When the transmitters and the intended receiver are equipped with a sufficiently large number of antenna while 
the eavesdropper is equipped with a limited number of antenna, then Gaussian codebooks provide a near optimum total of 
S-DoF for the Gaussian MIMO multiple-access-channel under perfect secrecy constraint. 

Note that when the transmitters and the receivers are equipped with a single antenna, i.e., Mk — Ne = N = 1, then the total 
achieved S-DoF is 0. It should be noted that this result comes from the lack of enough dimension for signal management 
at the receivers by using Gaussian codebooks. In our achievability scheme, nodes JC — 1 send sequences from a codebook 
randomly generated in an i.i.d. fashion according to a Gaussian distribution. These are the worst noises from the eavesdroppers 
perspective if Gaussian i.i.d. signaling is used in Xi, see |3r|. However, since the channel is fully connected, /C — 1 are also 
the worst noises for the intended receiver. This effect causes the secrecy rate to saturate, leading to zero S-DoF. The following 
Theorem establishes an upper-bound for the total S-DoF. 



IV. Secure DoF of the Single-Antenna Multiple- Access-Channel 

In this section we consider the secure multiple-access-channel of ([TJ when all the transmitters and the receivers have a single 
antenna, i.e., Mk = N = Ne = 1 for all k E K,. We showed in the previous section that Gaussian codebooks lead to zero 
total S-DoF. Here, we will provide a coding scheme based on integer codebooks and show that for almost all channel gains a 
positive total S-DoF is achievable, almost surely. The following theorem illustrates our results. 

Theorem 4: For the Gaussian single antenna multiple-access-channel of ([TJ with A/^ = N = N^, = 1, a. total -^^i secure 
degrees-of-freedom can be achieved for almost all channel gains, almost surely. 

Proof: When the transmitters and the receivers are equipped with a single antenna, then the channel model of ([Hi is 
equivalent as follows: 

K 

Y= hkXk + Wi (22) 
fc=i 

K 

Z=Y.hk,eXk+W2, 
fc=l 
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where Wi ~ ^{0, 1), W2 ~ Af{0, 1), and < P for all e /C. Let us define = %^Xfe and /i^ = ^ and without 

loss of generality assume that Hk = 1, then the channel model is equivalent as follows: 

.fc=l 

K 



Y=A 



Wi (23) 



fe=i 



where, A2£;[X2] < P = ^P. In this model we say that the signals are ahgned at the eavesdropper according to the following 
definition: 

Definition 2: The signals Xi, X2,...,Xk are said to be aUgned at a receiver if its received signal is a rational combination 
of them. 

Note that, in n-dimensional Euclidean spaces (n > 2), two signals are aligned when they are received in the same direction 
at the receiver. In general, to signals are aligned at a receiver if they span a subspace with dimension less than m. The above 
definition, however, generalizes the concept of alignment for the one-dimensional real numbers. Our coding scheme is based 
on integer codebooks, which means that Xk E TL for all fc € AT. If some integer signals are aligned at a receiver, then their 
effect is similar to a single signal at high SNR regimes. This is due to the fact that rational numbers form a filed and therefore 
the sum of constellations from Q form a constellation in Q with an enlarged cardinality. 

Before we present our achievability scheme, we need to define the rational dimension of a^et of £eal numbers. 

Definition 3: {Rational Dimension) The rational dimension of a set of real numbers {/ii, /12, hK-i,hK = 1} is M if 
there exists a set of real numbers {gi,g2, ■■■,9m} such that each hk can be represented as a rational combination of ^jS, i.e., 
hk = ak,\gi + o.k,i92 + ••• + ak,MgM, where ak,i G Q for all fc e /C and i € M. 

In fact, the Rational dimension of a set of channel gains is the effective dimension seen at the corresponding receiver. In 
particular, {hi, h2, .., hx} are rationally independent if the rational dimension is K, i.e., none of the hk can be represented 
as the rational combination of other numbers. 

Note that all of the channel gains hk are generated independently with a distribution. From the number theory, it is known 
that the set of all possible channel gains that are rationally independent have a Lebesgue measure 1. Therefore, we can assume 
that {/ii,/i2, are rationally independent, almost surely. Our achievability coding scheme is as follows: 

1 ) Encoding: Each transmitter hmits its input symbols to a finite set which is called the transmit constellation. Even though 
it has access to the continuum of real numbers, restriction to a finite set has the benefit of easy and feasible decoding at the 
intended receiver. The transmitter k selects a constellation Vfe to send message Wk- The constellation points are chosen from 
integer points, i.e., Vfe c Z. We assume that Vk is a bounded set. Hence, there is a constant Qk such that Vk C [— Qfe, Qk]- 
The cardinality of Vk which limits the rate of message Wk is denoted by ||Vfe||. 

Having formed the constellation, the transmitter k constructs a random codebook for message Wk with rate Rk- This can 
be accomplished by choosing a probability distribution on the input alphabets. The uniform distribution is the first candidate 
and it is selected for the sake of simplicity. Therefore, the stochastic encoder k generates 2"'^^'^"^'='^l'^('^-'')'=)+'^'=) independent 
and identically distributed sequences according to the distribution P(5;^) = nr=i P(^k,i), where P(xk,i) denotes the 
probability distribution function of the uniformly distributed random variable Xk,i over Vfe. Next, randomly distribute these 
sequences into 2"^*= bins. Index each of the bins by Wk € {1, 2, 2"^*=}. 

For each user A; G /C, to send message Wk, the transmitter looks for a .xj! in bin Wk- The rates are such that there exist 
more than one x^. The transmitter randomly chooses one of them and sends x}? = ^7^- The parameter A controls the input 
power. 

2) Decoding: At a specific time, the received signal at the legitimate receiver is as follows: 



Y 



hiXi + h2X2 + ... + hK-iXK-i + Xk 



+ Wt (24) 



The legitimate receiver passes the received signal Y through a hard decoder. The hard decoder looks for a point Y in the received 



constellation Vr = A 



hiVi + /12V2 + ... + hx-iVK-i + Vk 



which is the nearest point to the received signal Y. Therefore, 



the continuous channel changes to a discrete one in which the input symbols are taken from the transmit constellations Vk and 
the output symbols belongs to the received constellation Vr- hk's are rationally independent which means that the equation 



hiXi + /12X2 + ... + hK-iXK-i + Xk 



has no rational solution. This property imphes that any real number Vr 



belonging to the constellation Vr is uniquely decomposable as Vr = AJ2^=i hkXk- Note that if there exists another possible 

decomposition Vj- = ^X^fLi hkX^, then /i^'s have to be rationally-dependent which is a contradiction. We call this property 
as property F. This property in fact implies that if there is no additive noise in the channel, then the receiver can decode all 
the transmitted signals with zero error probability. 
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Remark 3: In a random environment it is easy to show that the set of channels gains which are rationally-dependent has a 
measure of zero with respect to the Lebesgue measure. Therefore, Property F is almost surely satisfied. 

3) Error Probability Analysis: Let dnun denote the minimum distance in the received constellation Vr- Having property 
r, the receiver can decode the transmitted signals. Let Vr and Vr be the transmitted and decoded symbols, respectively. The 
probability of error, i.e., = P{Vr ^ Vr), is bounded as follows: 

Pe<g(%^)<exp(-^) (25) 

where Q{x) ~ exp{—^)dt. Note that finding dmin is not easy in general. Using Khintchine and Groshev theorems, 

however, it is possible to lower bound the minimum distance. Here we explain some background information for using the 
theorems of Khintchine and Groshev. 

The field of Diophantine approximation in number theory deals with approximation of real numbers with rational numbers. 
The reader is referred to lf32l . Il33l and the references therein. The Khintchine theorem is one of the cornerstones in this field. 
This theorem provides a criteria for a given function ip : N R+ and real number h, such that \p + hq\ < has either 

infinitely many solutions or at most, finitely many solutions for {p,q) G 1? . Let ^(V') denote the set of real numbers such 
that |p + hq\ < V'(kl) has infinitely many solutions in integers. The theorem has two parts. The first part is the convergent 
part and states that if V-'(kl) is convergent, i.e.. 



ipiq) < oo (26) 



then A{ip) has a measure of zero with respect to the Lebesque measure. This part can be rephrased in a more convenient way, 
as follows. For almost all real numbers, \p + hq\ > '0(kl) holds for all {p, q) e except for finitely many of them. Since 
the number of integers violating the inequality is finite, one can find a constant c such that 

\p + hq\>cij{\q\) (27) 

holds for all integers p and q, almost surely. The divergent part of the theorem states that A{tp) has the full measure, i.e. the 
set R — A{iIj) has measure zero, provided that ip is decreasing and "^dgl) is divergent, i.e., 

oo 

Y,^iq) = ^- (28) 

There is an extension to Khintchines theorem which regards the approximation of linear forms. Let h — {hi, /12, • •, hx^i) and 
q = {qi, q2, qK-i) denote {K — l)-tuples in K''^^^ and Z^^^^, respectively. Let Ak-i{iIj) denote the set of {K — l)-tuple 
real numbers h such that 

\p + qihi +(72^2 + ■■■ + qK-ihK-i\ < V^(|q|oo) (29) 

has infinitely many solutions for p e Z and q e Z^^^^. Here, |q|oo is the supreme norm of q which is defined as max^ \qk\. 
The following theorem illustrates the Lebesque measure of the set Ax-iii') []■ 

Theorem 5: (Khintchine-Groshev) Let V' : N — ^ R+. Then, the set Ak-iH') has measure zero provided that 



00 

q=l 



q^-^ipiq) < 00 (30) 



and has the full measure if 

00 



^■*/'(<z) — 00 ^nd -0 is monotonic (31) 

q=l 

In this paper, we are interested in the convergent part of the theorem. Moreover, given an arbitrary e > the function 
'0('?) = qK-i+t satisfies the condition of ( [30l l. In fact, the convergent part of the above theorem can be stated as follows. For 
almost all K — 1-tuple real numbers h there exists a constant c such that 

\p + qjii + q2h2 + ... + qK-ihK-l\ > 7 , '^.^r- . (32) 

(maxfc \qk\r-^+'' 

holds for all p G Z and q G Z^^^^. The Khintchine-Groshev theorem can be used to bound the minimum distance of points 
in the received constellation Vr- In fact, a point in the received constellation has a linear form of 



Vr — A 

Therefore, we can conclude that 



hivi + h2V2 + ... + hK-iVK-i + vk 



(33) 



Ac 
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The probability of error in hard decoding, see ( |25] ), can be bounded as: 

(niaxfcg{i 2 K-i} Qk 



Pe < exp ( -7^737:^ ^ ^2K-2+2e ) (^S) 



Let us assume that Qk for all k e {1, 2, K - 1} is Q = [P^cK+.j j Moreover, since E[Xl] < A^Ql < P, we can choose 
A = p^K+iy . Substituting in (l35ll yields 

Pe < exp(-^P^). (36) 



Thus, Pe — 7- when P ^ cx) or equivalently P ^ oo. 

4) Equivocation Calculation: Since the equivocation analysis of Theorem [T] is valid for any input distribution, therefore 
integer inputs satisfy the perfect secrecy constraint. 

5) S-DoF Calculation: The maximum achievable sum rate is as follows: 

J2Rk= I{Xi,X2,...,Xk;Y)-I{Xi,X2,...,Xk;Z) (37) 

^ HiXi,X2,...,XK\Z)- H{Xi,X2,...,Xk\Y) 

> H{Xi,X2, ...,Xk\Z) - 1 - Pelog \\X\\ 

> H{Xi,X2,...,XK\J2Xk)~l~Pe\0g\\X\\ 

fce/c 

^ H{Xk) ~ H{Y^ Xfe) - 1 - P, log lli^ll 
fce/c fce/c 

= i^log(2g + l) -log(2A'0 + l) - 1 -Pelogpll, 

where (a) follows from Fano's inequality, (&) follows from the fact that conditioning always decreases entropy, (c) follows 
from chain rule, and (d) follows from the fact that X^ has uniform distribution over Vfe = [— Q, Q\. The S-DoF therefore can 
be computed as follows: 

li^ Efce^ (38) 

' P^oo ilogP 

Since e can be arbitrarily small, then r\ — -^^i is indeed achievable. ■ 
As we saw in the previous section, multiple-antennas (or equivalently, time-varying and/or frequency-selective channels) 
provide enough freedom, which allows us to choose appropriate signaling directions to separate between the messages at 
the intended receiver and at the same time pack the signals into a low dimensionality subspace at the eavesdropper. In contrary, 
it was commonly believed that time-invariant frequency flat single-antenna channels cannot provide any degrees-of-freedom. 
In Theorem, |4] however, we developed a machinery that transforms the single-antenna systems to a pseudo multiple-antenna 
system with some antennas. The number of available dimensions in the equivalent pseudo multiple-antenna systems is K when 
all of K channel gains between the transmitters and the intended receiver are rationally-independent (this condition is satisfied 
almost surely). The equivalent pseudo multiple-antenna system can simulate the behavior of a multiple-dimensional system 
(in time/frequency/space) and allows us to simultaneously separate the signals at the intended receiver and align them to the 
eavesdropper 

Note that in the MISOSE wire-tap channel (Multiple-Input Single-Output Single-Eavesdropper), when the channel realization 
is unique, we can achieve the optimum S-DoF of 1 through cooperation among transmitters. This Theorem clarifies the fact 
that, we lose the amount of in S-DoF due to the lack of cooperation between the transmitters. We still gain through the 
possibility of signal alignment at the eavesdropper, however. 



A. Rationally -Dependent Channel Gains: Multiple-layer coding 

When the channel gains are rationally dependent, then a more sophisticated multiple-layer constellation design is required 
to achieve higher S-DoF. The reason is that some messages share the same dimension at the intended receiver and as a 
result, splitting them requires more structure in constellations. We propose a multiple-layer constellation that can not only be 
distinguished at the intended receiver but are also packed efficiently at the eavesdropper. This is accomplished by allowing 
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a carry-over from different levels. In this subsection, for the sake of simplicity, we consider a two user-secure MAC. This 
channel is modeled as follows: 



hiXi + X2 
X1+X2 



Wi 



(39) 



Wo 



where A controls the output power When the channel gain hi is irrational then according to Theorem |4] the total S-DoF of 
i is indeed achievable. For the rational channel gain hi = n,m £ N,m ^ 0, however, the coding scheme of Theorem 2] 
fails and we need to use a multiple-layer coding scheme. 

In multiple-layer coding scheme, we select the constellation points in the base e N as follows: 



L-1 

E 

1=0 



biW 



(40) 



where, bi for all / e {0,1,. ..,L — 1} are independent random variables which take value from {0, 1, 2, , a — 1} with 
uniform probability distribution, b represents the vector b = {&o, ^1, &l-i} and the parameter a controls the number of 
constellation points. We assume that a < W and therefore, all constellation points are distinct and the size of the constellations 
are |Vi| = IV2I = a^. The maximum possible rate for each user is therefore bounded by Lloga. 

At each transmitter a random codebook is generated by randomly choosing hi according to a uniform distribution. The signal 
transmitted by users 1 and 2 are Xi — v{h) and X2 = v{h ), respectively. Note that the above multiple-layer constellation 
had a DC component and this component needs to be removed at the transmitters. The DC component, however, duplicated 
the achievable rates and has no effect on the S-DoF. 

To calculate A, since hi and bj are independent for / 7^ j, we have the following chain of inequalities: 



L-1 



1=0 



E[bf]W- 



(41) 



< ^2^2(L-i)(a-l)(2«-l)y> ^ 



< A^W^^^-^^- 



1=0 



3 l-Ty-2 



< 



Therefore, by choosing A = "^^^j,^^ - the power constraint A'^EX^ < P is satisfied. The received constellation at the 
intended receiver and the eavesdropper can be written as follows, respectively: 



A ^^"^ 

r= — ^ ( nfe; + mb\ )W' + Wi 

^ 1=0 



(42) 



Z= A 



L-1 

E 

1=0 



(bi + b^ W' 



W2 



A point in the received constellation V,. of the intended receiver can be represented as follows: 

L-1 



(b,b') = ^ E ("^i + W^'- 



(43) 



Note that the received constellation needs to satisfy the property F, as the intended receiver needs to uniquely decode the 
transmitted signals. The following theorem characterizes the total achievable S-DoF. 

Theorem 6: The following S-DoF is achievable for the two user single antenna MAC with rational channel gain hi — —: 



log(n) 



V = 



log(n(2n-l)) ' 
log(s+l) 



if 2n > m 

if 2n < m and rn = 2s + 1 



log((s+l)(2s+l))' 

Jssill — if 2n < m and m — 2s 



(44) 



log(2s 
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TABLE I 

Chosen a and W to satisfy property V 





/il = - 

m 


a 


W 


Case 1 


2n > m 


n 


n(2n - 1) 


Case 2 


2n < m and m = 2s + 1 


s + 1 


(s + l)(2s + l) 


Case 3 


2n < m and m = 2s 


s 


2s^ - n 



Proof: Let us first assume that the property F is satisfied for given W and a. It is easy to show that the minimum distance 
in the received constellation Vr is dmin = — ■ The probability of error is therefore bounded as follows: 



(45) 



Let us choose L as 



exp 



L = 



DP 



log(p0-5-^) 
log(T^) 



(46) 



where e > is an arbitrary small constant. Clearly, with this choice of L, < Gxp(— 7^^*^) where 7 is a constant. Thus, 
when SNR — > 00, then P^ — > 0. Using ( |37] |. the S-DoF of the system can be derived as follows: 



rj— Jim 

P-i-oc 



L log(a) 
ilogP 

log(P° 



(47) 



Jim 

P-i-oo 

(l-2e) 



log{W) 



log(a) 



ilogP 
log(a) 



log(W^) ■ 

Since e is an arbitrary small constant, the total S-DoF of the system is 

log(a) 

V = 



(48) 



log{W) ■ 

This equation implies that to achieve the maximum possible r/, we need to maximize a and minimize W with the constraint 
that the property F is satisfied. Table I shows the choices of a and W for Theorem |6] To complete the proof we need to show 
that with the choices of Table I, the property F is satisfied. 
Lemma 3: The property F holds for all the choices of Table I. 

Proof: Please see Appendix C. ■ 



Note that this result implies that the total achievable S-DoF by using integer lattice codes is discontinuous with respect to the 
channel coefficients. 



V. Conclusion 

In this paper, we considered a K user secure Gaussian MAC with an external eavesdropper We proved an achievable 
rate region for the secure discrete memoryless MAC and thereafter we established the secrecy sum capacity of the degraded 
Gaussian MIMO MAC using Gaussian codebooks. For the non-degraded Gaussian MIMO MAC, we proposed an algorithm 
inspired by the interference alignment technique to achieve the largest possible total S-DoF. When all the terminals are equipped 
with single antenna, the Gaussian codebooks lead to zero S-DoF. Therefore, we proposed a novel secure coding scheme to 
achieve positive S-DoF in the single antenna MAC. This scheme converts the single-antenna system into a multiple-dimension 
system with fractional dimensions. The achievability scheme is based on the alignment of signals into a small sub-space at 
the eavesdropper, and the simultaneous separation of the signals at the intended receiver. We proved that total S-DoF of -^^^ 
can be achieved for almost all channel gains which are rationally independent. For the rationally dependent channel gains, 
we illustrated the power of the multi-layer coding scheme, through an example channel, to achieve a positive S-DoF. As a 
function of channel gains, therefore, we showed that the achievable S-DoF is discontinues. 
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Appendix 

A. Proof of Theorem Q] 

1) Codebook Generation: The structure of the encoder for user fc € /C is depicted in Fig. Fix P{uk) and P{xk\uk)- The 
stochastic encoder k generates 2"(^('-^''''^l'^<'=-'=)''^"'''^''^ independent and identically distributed sequences mJJ according to the 
distribution P{u^^) = YVi^i P{uk,i)- Next, randomly distribute these sequences into 2"^* bins. Index each of the bins by 
u;fc e {1,2,...,2"«'=}. 

2) Encoding: For each user fc G /C, to send message Wk, the transmitter looks for a u'"^ in bin Wk- The rates are such that 
there exist more than one it^. The transmitter randomly chooses one of them and then generates xjj according to P{x2\u^) — 
YVi=iPi^k,iWk,i) and sends it. 

3) Decoding: The received signals at the legitimate receiver, y", is the output of the channel P(?/"|xJi) — n"=i Piyi\x!C,i)- 
The legitimate receiver looks for the unique sequence such that (itJJ^, y") is jointly typical and declares the indices of the 
bins containing uJJ as the messages received. 

4) Error Probability Analysis: Since the region of (fT2l i is a subset of the capacity region of the multiple-access-channel 
without secrecy constraint, then the error probability analysis is the same as [|3] and omitted here. 

5) Equivocation Calculation: To satisfy the perfect secrecy constraint, we need to prove the requirement of (|7J. From 
i/(W/c|^") we have 

i/(Wyc|Z")-i/(Wyc,Z")-i/(^") (49) 
= H{W^, UJ^, Z") - H{UJl\W^, Z") - (Z") 

> H{Wk, UZ) + H{Z-^\Wk, Ul) - ne„ - H{Z'') 
HiW^, Ul) + H{Z^\Ul) - ne„ - H{Z^) 

> H{Ul) + ff(Z"|C/£) - ne„ - H{Z^) 
= H{UZ)-I{Ul-Z-)-nen 

I{Ul:Y^-^)-I{Ul-Z^^)-ne^ 

> n^Rk - ne„ - nSin ~ nS^n 

keK 

= H{Wk.) - nen - nSin - nS^n, 

where (a) follows from Fano's inequality, which states that for sufficiently large n, H {U]^\Wic, Z"-) < h{P^) +nP^^Rw < 
ne„. Here P^^ denotes the wiretapper's error probability of decoding in the case that the bin numbers wjc are known to 
the eavesdropper and = I{U]c; Z). Since the sum rate is small enough, then for sufficiently large n. (6) follows 

from the following Markov chain: Wk ^ ^ Z". Hence, we have H(Z''^\Wk,U'^) = H{Z''\U]l). (c) follows from the 
fact that H{Wk., U^) > H{U^). (d) follows from that fact that i?(C/£) > /([/£; F"). (e) follows from the following lemma: 
Lemma 4: Assume [/^, F" and Z" are generated according to the achievability scheme of Theorem [T] then we have, 

nI{UK-: Y) - ndin < I{Ul; F") < nI{UK;Y) + nb^n (50) 
n/([/yc; Z) - n(53„ < /((7£; Z") < uKUk. Z) + nd^^, (51) 

where, Ji„, ^3n, 5in when n oo. 

Proof We first prove (ISOl l. Let Ai^\Pir^,z) denote the set of typical sequences {u^, z^) with respect to Puk.,z, and 

\ 0, otherwise 

be the corresponding indicator function. We expand Z", Q and I{U]^, (; Z") as follow: 

Z", 0- /({/£; Z") + C|^") (53) 
= /({/^;C) + /({/^;^"IC), 

/((7£, C; ^")= /(f/£; + /(C; (54) 
= /(C;Z")+/({/^;Z"|C). 

Therefore, we have 

/((7£; Zn|c) - /(c/£; Cl^") < /(c/£; < ^"10 + /(C; ^")- (55) 



13 



Note that /((; Z") < H{C) < 1 and /([/£; C|^") < H{(\Z") < H{() < 1. Thus, the above inequality implies that 

1 1 
J2 PiC = mUl; Zn\C = j)-l< I{Ul; Z") < ^ P(C = mUl; Z-\C = j) + 1. (56) 
j=o j=o 

According to the joint typicality property, we have 

< P(C = !)/([/£; Z-\C = 1) < nPiiul, z") € Ai^HPu^.z)) log < ne„ log |1Z|1. (57) 
Now consider the term P{( — 0)I{UJi; Z"\( = 0). Following the sequence joint typicality properties, we have 

(1 -£„)/({/£; Z"|C = 0) <P(C = 0)/(;7£;Z"|C = 0) </([/£; Z"|C = 0), (58) 

where 

P{ul,z-) 



Since H{U,c, Z) - e„ < -i logP(u;^, z") < H{Uk,Z) + e„, then we have, 

n [--H{U^, Z) + H{Uk,) + H{Z) - 3e„] < /([/^; Z"|C - 0) < n hi?(C/;c, ^) + H{Uk,) + + 3e„] , (60) 

or equivalently, 

n [I{Uk; Z) - 3e„] < /(t/^; Z"|C = 0) < n [/(C/^c; Z) + 3e„] . (61) 
By substituting ( |6T| l into ( |58] l and then substituting ( |58] l and ( |57l ) into ( |56l ), we get the desired result, 

n/(C/;c; ^) - nS^,, < I{Ul- Z") < nI{UK\ Z) + n^2„, (62) 

where 

<^i„ = e„/(C/;c;^) + 3(l-e„)e„ + i (63) 

n 

<^2n = 3e„ + e„ log ||Z|| + -. 

n 

Following the same steps, one can prove ( fSTT i. ■ 

B. Proof of the Converse for Theorem |2] 

Before starting the proof, we first present some useful lemmas. 

Lemma 5: The secrecy sum capacity of the Gaussian MIMO MAC is upper-bounded by 

Csum < max /(xi, X2, xk; y|z), (64) 

P(xOP(x2)...P(xk) 

where maximization is over all distributions P(xi)P(x2)...P(xk) that satisfy the power constraint, i.e., Tr(x^x) < P. 
Proof: According to Fano's inequality and the perfect secrecy constraint, we have 

n^i?fc</(W^;c;y")-/(W^yc;z") (65) 

feG/C 

< /(w^)c;y",z")-/(W;c;z") 
= My"|z")-/i(y"|W^;c,z") 

< /.(y"|z")-My"|M^K,xg,z") 

< My"|z")-My"K,z") 

< My"|z")-X^My(i)|x^(i),z(i)) 

1=1 

(/) " 

< ^My(i)|z(i))-My(i)|xc(i),z(i)) 

i=l 

< nl{xic;y\z,q) 

(9) 

< n-^(xK;;y|z), 
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where (a) and (6) follows from chain rule, (c) follows from the fact that conditioning decreases the differential entropy, (d) 
follows from the Markov chain Wjc (x",z") — ^ y", (e) follows from the fact that the channel is memoryless, (/) is 
obtained by defining a time-sharing random variable q that takes values uniformly over the index set {1, 2, n} and defining 
(xyc, y, z) to be the tuple of random variables that conditioned on q = i, have the same joint distribution as (xx;(i), y(i), z(i))- 
Finally, (g) follows from the fact that /(xyc;y|z) is concave in P(xi)...P(xk) (see, e.g.,[],[9. Appendix I] for a proof), so 
that Jensens inequality can be applied. ■ 
Lemma 6: If DHk = Hk.e for all k E K, and DD^ ^ I, then the function 



/(Xi,X2,...,XK) = -l0g 



I + J2 HkXkH 



keK 



log 



I + Hk eXkH^^ 



keK 



(66) 



is a concave function of (Xi,...,Xk) for Xk >: for all k E JC. Moreover, for (Xi,...,Xk) such that Xk >i and 
(Ai, Ak) such that Afc >z 0, we have 



/(Xi, Xk) < /(Xi + Ai, Xk + A^). 
Proof: Using the degradedness property of DHk = Hk,e, the function /(.) can be re-written as follows: 



/(Xi,X2,...,XK)=-l0g 



^log 



I + J2 HkXkH 

keK 

I + HkXkH 



keK 



-2 log 



-2 log 



I + J2 Hk eXkHj^ 

keK 

I + J2 DHkXkHj^D 



(67) 



(68) 



keK 



= 2l°g 





I + EfcG/c HfcXkH^ 




[(DtD)"^ - I 


+ 


I + E/ce/c HkXkHj^ 


|DtD| 



(69) 



where (a) follows from the fact that |I + AB| = |I + BA|. According to [23, Lemma II. 3], this function is concave with 
regard to I + J2keK HkXkHj^., and is therefore concave with regard to (Xi, X2, Xk). 

To prove the property of (l67T i. note that for any A ^ 0, A ^ and B ;^ 0, we have the following property [24,p.3942]: 



IBI 



< 



IB 



|A + B| - |A + B + A| 
We choose A = 'J2keK HkAfcH]^ and apply the above property to (|69l) . We thus obtain. 



/(Xi,X2,...,XK)=-l0g 





I + Efee/c HkXkH^ 




[(DtD)"^ - I 


+ 


I + T,keK HkXkHj^ 


|DtD| 



(70) 



(71) 





I + EfceicHk(Xk + Ak)Hj, 




[(DtD)"^ - I 


+ 


I + E.eycHk(Xk + Ak)Ht 


|DtD| 



<^log 



/(Xi + Ai,...,Xk + Ak). 



To prove the converse part, we first start with Lemma |5] to bound the sum rate as follows: 

^i?fe</(xK;y|z) 



keK 



= /i(y|z) - ft.(y|xK;,z) 
-/i(y|z)-;i(ni) 

(a) 1 

= 2'"g 

keK 



(b) 1 

<2log 



I+^HkK^X 

keK 

I + Y HkQkHj^ 



■log 



keK 



log 

2 ^ 



I+5^Hk,eKxX 

keK 

I+^HkeQkHj^ 



keK 



(72) 



where (a) follows from the fact that h{y\z) is maximized by jointly Gaussian y and z for fixed covariance matrix Qy.z and 
(6) follows from the degradedness assumption and therefore concavity and monotonicity properties given in Lemma |6] and the 
fact that ^ Qk- 
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C. Proof of Lemma \3\ 

We prove this lemma by induction on L. To show the lemma for L = 0, it is sufficient to prove that the equation 

n(foo-&o)+TO(6o-&o) = 0, (73) 

has no nontrivial solution when b^, b^, bo, 6q G {0, 1, 2, a — 1}. The necessary and sufficient conditions for the equation d73T l 
are that 6q — &q is dividable by n and 6o — 6o is dividable by n. We show that one of these conditions does not hold for all 
choices of Table I. 

Case 1: In this case a — n. Following the fact that — (n — 1) < fep — &q < n — 1, it is easy to deduce that n\ {bg — bo)-. 
Case 2: In this case a = s + 1 where m = 2s + 1. Following the fact that —(2s + I) < bo — bo < 2s + 1, it is easy to 
deduce that m \ bo — bo- 

Case 3: In this case a = s where m = 2s. Following the fact that —2s < bo — bo < 2s, it is easy to show that m | 6o ~ bo- 
Now assume that property F holds for L — 1. We need to show that the equation 

-J2{nibi-bi) + m{b'i-b'i))w' =0, (74) 

1=0 

has no nontrivial solution. Equivalently, this equation can be written as follows: 

L-2 

n{bo^bo) + m{b'o-bo) = wY, {^^ibi+i -bi+i) + m{b'i+, -k+i)) WK (75) 

We prove that the above equation has no nontrivial solution in two steps. First, assume that the right hand side of (l75l l is zero. 
This equation therefore reduces to 

n{bo - bo) + m{b'o - b^) = 0, (76) 

which we have already shown that has no nontrivial solution for all three cases. 

Secondly, assume that the right side of ( |75] l is non-zero. The equation ( |75] l can therefore be written as follows: 

n{bo - bo) + m{b'o - b'o) = cW, {11) 

where c G Z and c 7^ 0. We need to prove that equation (fTTT i has no nontrivial solution for all three cases. 

Cose 1: In this case W = n{2n — 1) and n divides n(^o — bo) and cW as well. However, as {m,n) ~ Ijind — (n — 1) < 
bo — bo<n—l, the equation (iTTl l has a solution iff b^ = bo which is a contradiction with the fact that n\bo — bo\ < n{n— 1) < 
\c\n{2n-l) = \c\W. 

Case 2: In this case W = {s + l)(2s + 1), n s + 1 and m = 2s + 1. Thus, 2s + 1 divides both to(6q — feg) ™d cW. 
Since {2n, m = 2s + 1) = 1 and —2s < bo — bg < 2s, therefore, 2s + 1 cannot divide n{bo — bo). Hence, equation (ITTT i has a 
solution iff bo — bo which contradicts the fact that m|&Q — bo\ < \c\W. 

Case 3: In this case W = 2s^ — n, a — s, 2n < m and m = 2s. We have 

\n{bo-bo) + m{b'o-bo)\< m\bo - 60 + b'o -b'ol (78) 

< 2m{a- 1) 
= 4s(s- 1) 

< 2W 

and therefore, it suffices to assume c = 1. Substituting W = 2s^ — n in (ITTI i. we have the following equation: 

n{bo~bo + l) + 2s{b'o-b'o) = 2s\ (79) 

Obviously, 2s divides 2s(feQ — fep) and — 2s^. However, since (2s, n) — 1 and —(2s — 1) < 60 ^ &o < 2s — 1, equation (|79] l 
has a solution iff bo — bo — 1 which is impossible due to the fact 2s|6q — 6q| < 2s^. This completes the proof. 
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